Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File:                     V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier:          YYJ9HQhAkMXwnxNyZoEcnQaEZg/coLqq++mrn+PowC8=
Subject key identifier:   EB:91:97:DA:A2:6C:BD:4F:90:3C:64:27:3E:18:FE:10:6C:29:B3:8A
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer:       /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number:          065A
Signing time:             Sun 08 Jun 2025 14:46:37 +0000
Manifest this update:     Sun 08 Jun 2025 14:46:37 +0000
Manifest next update:     Sun 15 Jun 2025 14:46:37 +0000
Files and hashes:         1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: bZmDl9LvTENYKLtjYv9bXgxzPIy0GkXvuRr/YnGqSBU=)
                          2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 14:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
        Validity
            Not Before: Jun  8 14:46:37 2025 GMT
            Not After : Jun 15 14:46:37 2025 GMT
        Subject: CN=6845a24d-2aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:ec:a4:93:99:7e:bc:7c:f1:c5:90:c6:0d:
                    7a:09:42:ea:2e:f5:6d:6e:f2:d5:2c:4b:a5:ca:cc:
                    c5:a8:ac:5d:e8:39:6d:c3:87:8d:d7:c4:e5:b4:20:
                    7a:9d:82:db:0c:3f:b2:07:25:00:0f:23:3a:83:93:
                    b0:d0:b0:00:07:b5:17:16:1d:94:9d:ec:7d:09:e6:
                    09:b0:5d:d7:f3:8d:9a:56:1c:d2:92:5e:35:f3:5b:
                    e8:c8:37:d2:5a:16:53:a8:b8:27:57:25:2c:02:33:
                    ba:77:78:5d:41:26:00:a8:19:f6:a9:4a:ba:8d:b1:
                    c0:34:65:87:5a:bc:56:94:08:ad:79:00:44:c5:c6:
                    81:e9:a9:51:ac:df:3c:e8:68:0c:2b:2b:ad:df:1c:
                    37:db:5a:65:c9:94:b2:ee:c7:c6:2d:09:b7:5b:c4:
                    6f:b0:af:f7:c9:e0:29:e5:37:3c:8d:26:21:38:fa:
                    d7:a9:d0:92:15:8c:78:59:d5:b1:99:85:6c:7b:f8:
                    8f:a3:9e:3f:ab:2c:9d:b9:69:4c:4f:34:af:03:8d:
                    b2:6c:4e:71:dd:6a:0b:92:17:79:bd:93:ff:80:a7:
                    42:06:bc:39:28:d4:c2:ca:57:c5:f0:36:71:33:34:
                    53:3e:6f:98:a8:c6:e8:7f:41:71:8a:c5:a2:d2:54:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:97:DA:A2:6C:BD:4F:90:3C:64:27:3E:18:FE:10:6C:29:B3:8A
            X509v3 Authority Key Identifier:
                keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:74:62:a8:9b:8c:9a:0b:55:29:ac:21:37:27:24:89:22:
         a3:50:db:09:12:fc:6e:1a:ed:90:32:4d:64:a8:d7:65:52:9c:
         30:a3:90:07:ff:aa:73:8e:a9:95:0b:ae:d9:46:1e:a6:b7:7d:
         b0:ee:cf:cb:e2:05:b5:5a:d4:2d:37:fe:4d:d9:d0:9c:1b:e2:
         f8:b3:3a:6f:72:98:fe:42:27:3e:3d:84:98:64:8a:c0:9f:98:
         5f:9b:5d:3b:33:4b:bc:f8:59:d3:7c:27:32:43:2b:14:5e:cb:
         06:12:88:2d:0e:5e:e7:af:94:9a:3d:8b:7f:1b:10:01:31:01:
         60:b4:4e:d0:6a:ab:fa:b0:86:2f:88:db:7a:55:f0:ad:66:4c:
         ea:5c:7f:a3:61:b2:3c:61:b6:80:ff:09:47:6d:67:90:57:61:
         1b:b3:18:76:49:a7:d4:57:d3:c1:59:55:03:e3:50:8b:28:3c:
         ee:2e:93:16:18:83:7a:a1:c0:a1:de:27:fb:4d:96:39:4f:1e:
         8d:24:73:c9:5f:2e:2f:80:f0:cf:29:94:70:4d:22:65:7e:81:
         17:8f:23:09:f7:e9:c8:63:3e:a8:8a:4a:51:be:e7:b4:7d:2c:
         43:79:f9:3f:76:75:2c:f6:83:d5:fe:a7:8c:17:23:23:d6:57:
         78:ea:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:25:08 2025 by rpki-client